Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.foxtab.com/?s=0&chnl=irn IE - HKLM…\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) IE - HKU\S-1-5-21-1211615226-2140066159-1826495425-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= … =CT2475029 IE - HKU\S-1-5-21-1211615226-2140066159-1826495425-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www2.iesearch.com/ IE - HKU\S-1-5-21-1211615226-2140066159-1826495425-1002…\URLSearchHook: {51a86bb3-6602-4c85-92a5-130ee4864f13} - Reg Error: Key error. File not found IE - HKU\S-1-5-21-1211615226-2140066159-1826495425-1002…\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) FF - prefs.js…browser.search.defaultenginename: “Foxtab Web Search” FF - prefs.js…browser.search.defaultthis.engineName: “MyAshampoo Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&SearchSource=3&q={searchTerms} ” FF - prefs.js…browser.search.order.1: “Search the web (Babylon)” FF - prefs.js…browser.search.selectedEngine: “MyAshampoo Customized Web Search” FF - prefs.js…browser.startup.homepage: “http://search.conduit.com/?ctid=CT2475029&SearchSource=13 ” FF - prefs.js…extensions.enabledItems: engine@conduit.com:3.2.5.2 FF - prefs.js…keyword.URL: “http://utils.babylon.com/abt/index.php?url= ” [2011-02-16 14:31:26 | 000,000,000 | —D | M] (No name found) – C:\Users\Visual Center\AppData\Roaming\mozilla\Firefox\Profiles\mfldudsj.default\extensions\engine@conduit.com O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (MyAshampoo Toolbar) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (MyAshampoo Toolbar) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-1211615226-2140066159-1826495425-1002…\Toolbar\WebBrowser: (MyAshampoo Toolbar) - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) O4 - HKU\S-1-5-21-1211615226-2140066159-1826495425-1002…\Run: [inetserv] C:\Users\Visual Center\AppData\Local\inetserv.exe () F3:64bit: - HKU\S-1-5-21-1211615226-2140066159-1826495425-1002 WinNT: Load - (C:\Users\VISUAL~1\AppData\Local\Temp\csrss.exe) - File not found F3 - HKU\S-1-5-21-1211615226-2140066159-1826495425-1002 WinNT: Load - (C:\Users\VISUAL~1\AppData\Local\Temp\csrss.exe) - File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) [2011-02-02 09:16:00 | 000,000,000 | —D | C] – C:\Users\Visual Center\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tool [2011-02-14 14:19:38 | 000,000,004 | ---- | M] () – C:\Users\Visual Center\AppData\Roaming\avdrn.dat [2011-02-14 14:19:40 | 000,000,004 | ---- | C] () – C:\Users\Visual Center\AppData\Roaming\srdwat.dat [2011-02-02 09:16:00 | 000,000,842 | ---- | C] () – C:\Users\Visual Center\Desktop\System Tool 2011.lnk [2011-01-31 14:48:14 | 000,110,614 | ---- | C] () – C:\Users\Visual Center\AppData\Local\inetserv.exe [2011-01-22 10:54:37 | 000,122,880 | ---- | C] () – C:\Users\Visual Center\AppData\Roaming\25404.exe :Commands [emptytemp]
Kliknij Wykonaj skrypt…Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).
Pokaż nowy log OTL.txt oraz raport z usuwania.
Odinstaluj:MyAshampoo Toolbar.Panel sterowania - Opcje internetowe - Połączenia - Ustawienia sieci LAN - zmień z proxy na automatyczne wykrywanie ustawień.